diff options
Diffstat (limited to 'net/tipc')
| -rw-r--r-- | net/tipc/node.c | 11 | 
1 files changed, 8 insertions, 3 deletions
| diff --git a/net/tipc/node.c b/net/tipc/node.c index 008670d1f43e..136338b85504 100644 --- a/net/tipc/node.c +++ b/net/tipc/node.c @@ -2895,17 +2895,22 @@ int tipc_nl_node_dump_monitor_peer(struct sk_buff *skb,  #ifdef CONFIG_TIPC_CRYPTO  static int tipc_nl_retrieve_key(struct nlattr **attrs, -				struct tipc_aead_key **key) +				struct tipc_aead_key **pkey)  {  	struct nlattr *attr = attrs[TIPC_NLA_NODE_KEY]; +	struct tipc_aead_key *key;  	if (!attr)  		return -ENODATA; -	*key = (struct tipc_aead_key *)nla_data(attr); -	if (nla_len(attr) < tipc_aead_key_size(*key)) +	if (nla_len(attr) < sizeof(*key)) +		return -EINVAL; +	key = (struct tipc_aead_key *)nla_data(attr); +	if (key->keylen > TIPC_AEAD_KEYLEN_MAX || +	    nla_len(attr) < tipc_aead_key_size(key))  		return -EINVAL; +	*pkey = key;  	return 0;  } | 
